Hi Xayavonqp
I am not very good at ACL but my work needs it Jennifer is right... you cannot have standard and extended together in a same ACL set.
If you want to add some entries to a current acl...what I would do usually is:
1.) Do a "show access-list (acl name or number). And copy them on a notepad or so.
2.) In the ACL List, you will see line numbers for each entry... This may be important if you want which acl entry prior to reach first...as you know the cisco device read and analyze each entry one by one by the orders. Remember, the implicit is always deny any any at the end of any acls.
3.) Create a entry with the line number (eg:access-list name line 50 extended permit tcp any host.....)
4.) The entry you add would not over written the same numbe of line (for example in this case is 50), instead those current entries would be put down one more (like adding a row in Excel in a table, in this case, the original entry line number with 50 now will turn to be 51, and the new one you add will be line 50).
Personally...to review access list on a fw, I like to use GUI...as it is easier to review and modify if you have over hundred and hundred lines there.
I hope you understand what I tried to say Good luck!
Takami chiro
